chainzwebresolver[.]xyz

This domain presents a targeted phishing threat designed to deceive users seeking decentralized application (Dapp) troubleshooting services. Analysis of chainzwebresolver.xyz reveals it masquerades as official TerraCR (TCR) support infrastructure, using the page title 'TerraCR (TCR) - Dapps Troubleshooting Services' to establish legitimacy. The site likely employs social engineering tactics to harvest cryptocurrency wallet credentials, seed phrases, or private keys under the pretense of resolving technical issues. Given the domain's specific targeting of blockchain users, the threat extends beyond generic credential theft to potential direct asset compromise. Infrastructure analysis provides concrete indicators of malicious intent. The domain was registered on March 04, 2026, through Name.com, Inc., and currently resolves to IP address 64.29.17.1 hosted on Amazon.com, Inc. (AS16509) in the United States. Security vendor detection rates show 5 out of 95 engines on VirusTotal flag the domain as malicious. The domain appears on three distinct security blocklists and is actively blocked by multiple wallet protection mechanisms. The SSL certificate issued by Let's Encrypt (R12) provides transport layer encryption, which may be leveraged to create a false sense of security while obfuscating data exfiltration. Users who have visited chainzwebresolver.xyz should immediately revoke any wallet permissions granted to the domain and cease all interaction. If credentials or private keys were entered, affected wallets should be considered compromised and funds transferred to new secure wallets with fresh seed phrases. Monitor all connected accounts for unauthorized transactions and enable enhanced authentication measures. The domain's continued active status despite multiple blocklist inclusions suggests persistent operational intent, necessitating heightened vigilance from cryptocurrency users and administrators.